Malicious code in kamalkumar (npm)

Source: amazon-inspector ded55127e604aa362e3e0edf86f1f19059d4b12112634b7640b27c44dabfdb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-145374

Malicious code in kamalkumar npm...